$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: IrX4xJiU+7e7iMal5g0L/vx+cR5zhpQTSl/kkpa+ewc= Subject key identifier: EC:33:E2:7A:6A:FF:A0:BA:D1:E8:5B:79:DB:42:A7:45:97:3E:88:8E Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 04C9 Signing time: Sat 25 Oct 2025 02:50:02 +0000 Manifest this update: Sat 25 Oct 2025 02:50:01 +0000 Manifest next update: Sat 01 Nov 2025 02:50:01 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: oWOONhKVNqcsGAc3RvIkuJNtYRwlf4AMH8F+Cw/ZSr0=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Oct 25 02:50:01 2025 GMT Not After : Nov 1 02:50:01 2025 GMT Subject: CN=68fc3ad9-748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:99:59:ac:30:29:b8:2f:70:97:dd:0e:5a: d4:10:90:33:de:39:18:4a:21:af:4a:6b:11:69:7b: 05:15:9a:f0:ae:f9:10:c5:7e:2f:a5:25:d8:35:ef: 0a:dc:45:82:d9:00:a8:3b:7d:25:46:e3:8f:cc:a0: b7:91:94:73:11:6e:b3:7f:d7:0f:db:00:85:9e:02: 08:58:c3:d0:95:14:d7:79:18:27:bd:b7:03:f6:b2: f6:be:89:99:7d:a7:ca:b4:4f:76:24:e1:04:4f:8e: 5a:07:45:26:8f:f7:8c:3e:c2:c3:42:d5:d9:0f:72: eb:62:5a:b7:11:57:2e:83:35:d3:4c:04:42:47:89: e0:ce:67:b9:05:71:74:98:91:45:d5:6d:0c:ca:75: 15:64:93:66:97:7f:73:ce:12:ae:6d:a8:bf:75:c9: 4f:4c:08:fa:a4:18:be:78:e5:53:26:c1:91:40:ef: d8:73:9d:4c:7e:0b:4a:82:d5:c9:2a:d9:c3:19:b0: 6a:69:08:07:6b:49:81:ab:52:a8:b3:9c:38:6b:5b: c7:34:0f:c7:b6:90:cb:43:e8:e0:51:20:90:15:e5: 47:39:9b:8b:cb:ff:18:21:46:ae:c9:9f:17:9e:da: 52:6f:12:ea:c1:66:e6:16:79:68:7d:2e:52:c5:72: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:E2:7A:6A:FF:A0:BA:D1:E8:5B:79:DB:42:A7:45:97:3E:88:8E X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:fd:74:6b:25:e7:32:ba:81:a7:8a:20:d4:08:8f:99:cd:69: 34:a6:5f:3e:7b:af:f3:4d:a0:b4:98:52:1d:6a:b9:8e:bb:a2: 49:7d:ed:6e:84:3c:57:71:64:6f:67:58:5d:16:e0:89:fd:a4: 2c:2f:b2:e7:b2:c0:0d:6a:e2:79:c1:8c:5a:6a:b0:8c:92:95: f2:03:67:34:58:eb:ca:13:d9:18:a0:a2:af:f9:56:0f:af:2d: 64:a4:17:b7:55:0a:dd:f1:4c:ab:7e:7a:d4:9a:3b:8a:aa:62: e1:f7:a4:d6:0d:8f:fe:50:99:1f:dd:c8:c7:c8:7b:16:b2:0b: e7:8f:ba:a5:e3:a3:50:c9:48:0f:32:1b:b3:ed:8f:e8:7a:14: 82:b1:0b:1e:cf:a8:52:9f:aa:f9:f0:1f:0a:ea:e4:12:3c:57: 60:ae:5c:3f:eb:45:79:e8:4c:5e:d1:49:da:7d:86:92:3f:41: 70:ab:5a:42:11:d2:b9:56:9e:e0:90:e3:6b:5e:90:17:b6:fe: 7c:08:e0:dd:48:91:4b:0d:60:30:59:81:42:b1:85:1d:ba:72: 22:cd:62:34:ea:98:a2:f4:f2:c4:6d:c2:c0:e1:b0:b3:b1:46: b4:08:4f:1a:5c:8e:5d:72:96:85:49:01:c7:bb:55:56:44:87: 89:99:04:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUxMDI1MDI1MDAxWhcNMjUxMTAxMDI1MDAxWjAYMRYwFAYD VQQDEw02OGZjM2FkOS03NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqySZWawwKbgvcJfdDlrUEJAz3jkYSiGvSmsRaXsFFZrwrvkQxX4vpSXYNe8K 3EWC2QCoO30lRuOPzKC3kZRzEW6zf9cP2wCFngIIWMPQlRTXeRgnvbcD9rL2vomZ fafKtE92JOEET45aB0Umj/eMPsLDQtXZD3LrYlq3EVcugzXTTARCR4ngzme5BXF0 mJFF1W0MynUVZJNml39zzhKubai/dclPTAj6pBi+eOVTJsGRQO/Yc51MfgtKgtXJ KtnDGbBqaQgHa0mBq1Kos5w4a1vHNA/HtpDLQ+jgUSCQFeVHOZuLy/8YIUauyZ8X ntpSbxLqwWbmFnlofS5SxXIVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwz4npq /6C60ehbedtCp0WXPoiOMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ/XRrJecyuoGniiDUCI+ZzWk0pl8+e6/zTaC0mFIdarmOu6JJfe1u hDxXcWRvZ1hdFuCJ/aQsL7LnssANauJ5wYxaarCMkpXyA2c0WOvKE9kYoKKv+VYP ry1kpBe3VQrd8UyrfnrUmjuKqmLh96TWDY/+UJkf3cjHyHsWsgvnj7ql46NQyUgP Mhuz7Y/oehSCsQsez6hSn6r58B8K6uQSPFdgrlw/60V56Exe0UnafYaSP0Fwq1pC EdK5Vp7gkONrXpAXtv58CODdSJFLDWAwWYFCsYUdunIizWI06pii9PLEbcLA4bCz sUa0CE8aXI5dcpaFSQHHu1VWRIeJmQSs -----END CERTIFICATE-----Generated at Mon Oct 27 00:41:52 2025 by rpki-client